This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer File: LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer (raw, json) Hash identifier: bm5Rf26/lr3holt2bh8MUtbhicXQYnwIiMullmizrCc= Subject key identifier: 2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED8DC3972D7A709266D570B1287653 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42836 AS: 208728 IP: 85.222.236.0/22 IP: 89.255.200.0/21 IP: 185.223.84.0/22 IP: 185.234.96.0/22 IP: 185.242.220.0/22 IP: 195.43.158.0/24 IP: 195.66.90.0/24 IP: 195.137.242.0/24 IP: 2001:67c:20c8::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:8d:c3:97:2d:7a:70:92:66:d5:70:b1:28:76:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c96946c501ddf48696da2cf110fdceb286fac98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d3:1f:66:24:ce:6b:28:1d:b6:55:58:5b:2d: 2d:ef:d7:31:bb:2e:eb:f0:9b:d4:29:65:f6:60:f6: 1a:a8:51:6f:f9:97:90:f8:46:d2:0f:b7:5b:23:51: 28:28:2c:f0:34:ad:c0:15:5d:c7:f7:58:42:9a:bf: 7d:aa:13:b9:77:2f:75:15:3d:b6:fa:fb:7c:e4:35: 66:da:1b:ec:91:6d:02:10:69:6a:c3:11:0d:3c:9b: 44:f2:bf:9c:a5:0f:a5:f6:ee:53:bc:ff:6f:6a:36: 17:79:46:4d:c5:fe:0d:15:f5:27:35:59:a3:d0:ef: 82:79:b8:75:9f:23:9b:34:7e:74:8d:15:fd:4c:08: bc:34:28:18:f5:9c:a5:9b:00:b8:f3:4a:a6:7e:88: 88:2f:53:3d:49:e0:28:a8:bc:2c:3a:9b:12:19:44: 1e:a3:9f:fe:17:28:d7:9a:24:00:e8:e1:e9:c8:b7: 98:f3:3d:61:21:59:33:b5:c8:f9:ae:f6:a0:b6:c4: e4:da:d2:67:9e:68:f9:46:82:bd:dc:65:32:53:be: 2e:51:77:f3:26:2f:8d:a7:94:68:33:16:65:2c:89: 6a:d8:3a:6a:39:4e:ab:f2:60:3c:2d:ed:47:98:54: ae:be:79:1d:4b:15:9b:a5:a5:68:60:68:e6:62:0a: 9a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.222.236.0/22 89.255.200.0/21 185.223.84.0/22 185.234.96.0/22 185.242.220.0/22 195.43.158.0/24 195.66.90.0/24 195.137.242.0/24 IPv6: 2001:67c:20c8::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42836 208728 Signature Algorithm: sha256WithRSAEncryption 66:96:d0:d9:01:52:82:c1:3d:a6:8b:a9:55:6e:a7:93:11:ed: e1:44:c5:f7:e8:93:91:6b:a0:08:92:e1:15:84:1e:97:1a:43: 04:32:83:bb:d6:15:24:d5:57:fe:d3:93:84:56:a9:28:f3:fe: 07:52:d5:9e:57:7f:14:d6:9b:93:3e:7e:78:44:33:a4:d2:c4: da:04:9f:4c:32:20:96:6b:75:57:c0:19:28:13:4f:e9:7b:5f: 52:04:6d:d0:51:4c:4b:1f:df:ae:7c:23:a8:09:8a:8f:4a:81: 9e:0f:12:4d:75:e0:7b:c3:05:6d:33:bf:92:e0:06:ec:81:20: 4b:06:4b:ff:fb:dd:03:12:d5:8b:4c:a7:34:ae:8c:03:61:34: 5d:fc:44:f3:ef:e1:84:36:55:e1:8d:e5:c5:bf:c9:9e:18:d2: 4e:df:57:26:c2:48:c6:27:0c:73:96:47:15:62:ee:d9:4f:47: 4b:d4:41:31:c7:4d:20:51:e1:24:32:68:78:f5:de:6c:72:66: 84:36:08:a2:22:f2:25:6c:64:d6:72:9d:97:1a:8c:a6:49:5f: ff:b5:9c:90:71:da:f9:f5:2b:ac:8e:1e:37:9c:43:2a:f6:30: a9:22:1f:0a:e1:6e:40:69:79:68:79:64:1e:fe:a6:f7:92:d8: 9f:e2:dc:ab -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgISAZt87Y3Dly16cJJm1XCxKHZTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzk2OTQ2YzUwMWRkZjQ4Njk2ZGEyY2YxMTBmZGNlYjI4NmZhYzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dMfZiTOaygdtlVYWy0t79cxuy7r 8JvUKWX2YPYaqFFv+ZeQ+EbSD7dbI1EoKCzwNK3AFV3H91hCmr99qhO5dy91FT22 +vt85DVm2hvskW0CEGlqwxENPJtE8r+cpQ+l9u5TvP9vajYXeUZNxf4NFfUnNVmj 0O+Cebh1nyObNH50jRX9TAi8NCgY9ZylmwC480qmfoiIL1M9SeAoqLwsOpsSGUQe o5/+FyjXmiQA6OHpyLeY8z1hIVkztcj5rvagtsTk2tJnnmj5RoK93GUyU74uUXfz Ji+Np5RoMxZlLIlq2DpqOU6r8mA8Le1HmFSuvnkdSxWbpaVoYGjmYgqauwIDAQAB o4IC4DCCAtwwHQYDVR0OBBYEFCyWlGxQHd9IaW2izxEP3Osob6yYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyLzA0ZmVm OC1kMmRmLTRmN2EtOTJiNC03Zjk3MGEzYWY5Y2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvMDRmZWY4 LWQyZGYtNGY3YS05MmI0LTdmOTcwYTNhZjljZC8xL0xKYVViRkFkMzBocGJhTFBF UV9jNnlodnJKZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFoGCCsGAQUF BwEHAQH/BEswSTA2BAIAATAwAwQCVd7sAwQDWf/IAwQCud9UAwQCuepgAwQCufLc AwQAwyueAwQAw0JaAwQAw4nyMA8EAgACMAkDBwAgAQZ8IMgwHwYIKwYBBQUHAQgB Af8EEDAOoAwwCgIDAKdUAgMDL1gwDQYJKoZIhvcNAQELBQADggEBAGaW0NkBUoLB PaaLqVVup5MR7eFExffok5FroAiS4RWEHpcaQwQyg7vWFSTVV/7Tk4RWqSjz/gdS 1Z5XfxTWm5M+fnhEM6TSxNoEn0wyIJZrdVfAGSgTT+l7X1IEbdBRTEsf3658I6gJ io9KgZ4PEk114HvDBW0zv5LgBuyBIEsGS//73QMS1YtMpzSujANhNF38RPPv4YQ2 VeGN5cW/yZ4Y0k7fVybCSMYnDHOWRxVi7tlPR0vUQTHHTSBR4SQyaHj13mxyZoQ2 CKIi8iVsZNZynZcajKZJX/+1nJBx2vn1K6yOHjecQyr2MKkiHwrhbkBpeWh5ZB7+ pveS2J/i3Ks= -----END CERTIFICATE-----Generated at Mon Jan 26 03:30:34 2026 by rpki-client